CourseMill Learning Management System CVE-2013-3605 Cross Site Request Forgery Vulnerabilities

Bugtraq ID:	62099
Class:	Input Validation Error
CVE:	CVE-2013-3605
Remote:	Yes
Local:	No
Published:	Aug 30 2013 12:00AM
Updated:	Aug 30 2013 12:00AM
Credit:	Mike Czumak
Vulnerable:	Trivantis CourseMill Learning Management System 6.8 Trivantis CourseMill Learning Management System 6.6
Not Vulnerable:

CourseMill Learning Management System CVE-2013-3605 Cross Site Request Forgery Vulnerabilities

CourseMill Learning Management System is prone to multiple cross-site request-forgery vulnerabilities.

Exploiting these issues may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible.

CourseMill Learning Management System 6.6 and 6.8 are vulnerable; other versions may also be affected.

CourseMill Learning Management System CVE-2013-3605 Cross Site Request Forgery Vulnerabilities

An attacker can exploit these issues by enticing an unsuspecting user to follow a malicious URI.

CourseMill Learning Management System CVE-2013-3605 Cross Site Request Forgery Vulnerabilities

References:

• CourseMill Learning Management System Homepage (Trivantis)
  
• Vulnerability Note VU#960908 : Coursemill Learning Management System contains mu (CERT)